Bring SAML SSO to the public API

Not urgent, but it would save everyone about an hour a week. Even shipping it behind a flag would let us validate the approach.

What we would need:

• Multi-language content
• A Chrome extension